Meta Muse already has a majorly worrying zero-day security issue
- Researcher Patrick Wardle finds zero‑day in Meta’s new Muse AI assistant,
- Dubbed not‑a‑mused, the exploit requires local compromise, voice dictation, and app integrations; attackers can hijack tokens and exfiltrate data
- Meta has been informed but no patch yet; flaw highlights risks of AI assistants with broad permissions
Meta’s new Artificial Intelligence (AI) assistant Muse reportedly carried a zero-day vulnerability that allowed attackers to gain access to people’s apps, such as WhatsApp or email.
However, it’s not as straightforward as your usual zero-day - to exploit it, simply deploying malware will not suffice. Certain features need to be enabled, and certain integrations established before the bug could be leveraged.
Not-a-mused
A little background, for context: Meta recently released Muse, describing it as an assistant that can “book appointments, fill out forms, and handle customer service.” It says the tool, available exclusively for the Mac ecosystem for now, “proactively takes tasks off...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
